lex-codegen 0.2.1 → 0.2.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f2e30c960afc4038c2b8f08bf3d24d10885fff4337bee37dd9801d7d20c34472
-  data.tar.gz: e304453e246016cc9103929ac502163c3b00cd3b1c1362cea2948b016a16c6ba
+  metadata.gz: eed547e1328af8116c12a43b51f3dc68ddafdc0d1d17bd7736df863c126c6fba
+  data.tar.gz: 275a664f737f601f95ad61ae9b73c10a4274ec36f8915dddc555e9ac9e966093
 SHA512:
-  metadata.gz: ed9d68924f40f3cfe096c5f6e5588afabdfe4e4aa746ec1b321343021e9cf51b694d59ebe058f84835c680fe375ff59a98d13393847b5c9215b456db78a0c760
-  data.tar.gz: 1fb2feefe815838c4e9211f7b1b3eb463afd2dc644d19a9a5cafa4a2f9821822c3d251fcef377ca25d37f40d713f5fb3879f2ba82762f817c504bbf7d0071da4
+  metadata.gz: f38f7774034f1f24428d4181fa3ef593d648ffdc62932d1eb3cba6c216167678c2441f3e8f6769d8016f4e1aeecaca9dbd27506126b6a62bc339277fced8fd5a
+  data.tar.gz: 607c285280a1429d2bcdad8ab3be42279a1bb13b3e5816554a178e65c08b5396633b2c0e5510c3b1b0eab766ef331433afe964adf5a76f71e5ac6abeb77d7e4e

data/CHANGELOG.md

@@ -1,5 +1,23 @@
 # Changelog
 
+## [0.2.4] - 2026-03-26
+
+### Security
+- `implement_stub`: added `allowed_stub_path?` guard to constrain `file_path` to the configured output directory, reducing the risk of unintended LLM access to local files
+
+## [0.2.3] - 2026-03-26
+
+### Fixed
+- `STUB_IMPLEMENTATION_INSTRUCTIONS`: clarified no-comments rule to explicitly exempt existing comments including `# frozen_string_literal: true`, preventing LLM from inadvertently stripping the frozen-string header
+- `extract_code`: updated all four fence-matching regexes to use `\r?\n` instead of `\n`, correctly handling Windows (`\r\n`) line endings in LLM responses
+
+## [0.2.2] - 2026-03-26
+
+### Added
+- `Runners::FromGap.implement_stub` — takes a stub file path and proposal context, calls LLM to fill in the implementation, returns generated code without writing to disk
+- `STUB_IMPLEMENTATION_INSTRUCTIONS` constant with coding rules for LLM code generation
+- Private helpers: `stub_implementation_prompt`, `extract_code` (markdown fence extraction)
+
 ## [0.2.1] - 2026-03-26
 
 ### Changed

data/lib/legion/extensions/codegen/runners/from_gap.rb

@@ -8,8 +8,26 @@ module Legion
     module Codegen
       module Runners
         module FromGap
+          include Legion::Logging::Helper
           extend self
 
+          STUB_IMPLEMENTATION_INSTRUCTIONS = <<~INSTRUCTIONS
+            You are a Ruby code generator for LegionIO cognitive extensions.
+            You receive a stub Ruby file and a description of the extension's purpose.
+            Replace stub method bodies with real implementations.
+
+            Rules:
+            - Return ONLY the complete Ruby file content, no markdown fencing, no explanation
+            - Keep the exact module/class/method structure and signatures
+            - Keep `# frozen_string_literal: true` on line 1
+            - Runner methods must return `{ success: true/false, ... }` hashes
+            - Use in-memory state only (instance variables, no database, no external APIs)
+            - Helper classes may use initialize for state setup
+            - Follow Ruby style: 2-space indent, snake_case methods
+            - Do not add require statements
+            - Do not add new comments unless the logic is non-obvious; keep existing comments (including `# frozen_string_literal: true` on line 1)
+          INSTRUCTIONS
+
           def generate(gap:)
             tier = Helpers::TierClassifier.classify(gap: gap)
 
@@ -22,6 +40,7 @@ module Legion
               { success: false, reason: :unknown_tier, tier: tier }
             end
           rescue StandardError => e
+            log.warn("generate failed: #{e.message}")
             { success: false, reason: :generation_error, error: e.message }
           end
 
@@ -55,6 +74,7 @@ module Legion
               spec_code:     spec_code
             }
           rescue StandardError => e
+            log.warn("generate_runner_method failed: #{e.message}")
             { success: false, reason: :generation_failed, error: e.message }
           end
 
@@ -80,15 +100,63 @@ module Legion
               extension:     name
             }
           rescue StandardError => e
+            log.warn("generate_full_extension failed: #{e.message}")
             { success: false, reason: :scaffold_failed, error: e.message }
           end
 
+          def implement_stub(file_path:, context:)
+            return { success: false, reason: :llm_unavailable } unless llm_available?
+            return { success: false, reason: :path_not_allowed } unless allowed_stub_path?(file_path)
+
+            stub_content = ::File.read(file_path)
+            prompt = stub_implementation_prompt(stub_content, context)
+
+            response = Legion::LLM.chat(
+              messages: [
+                { role: 'system', content: STUB_IMPLEMENTATION_INSTRUCTIONS },
+                { role: 'user', content: prompt }
+              ],
+              caller:   { source: 'lex-codegen', component: 'from_gap', operation: 'implement_stub' }
+            )
+
+            code = extract_code(response&.content)
+            return { success: false, reason: :llm_empty_response } if code.nil? || code.strip.empty?
+
+            { success: true, code: code, file_path: file_path }
+          rescue StandardError => e
+            log.warn("implement_stub failed: #{e.message}")
+            { success: false, reason: :generation_error, error: e.message }
+          end
+
           private
 
           def llm_available?
             defined?(Legion::LLM) && Legion::LLM.respond_to?(:chat)
           end
 
+          def allowed_stub_path?(file_path)
+            return false unless file_path&.end_with?('.rb')
+
+            begin
+              allowed_root = ::File.realpath(output_dir)
+            rescue Errno::ENOENT, Errno::EACCES => e
+              log.debug("realpath fallback for output_dir: #{e.message}")
+              allowed_root = ::File.expand_path(output_dir)
+            end
+
+            begin
+              # Disallow direct symlink files to avoid exfiltrating arbitrary targets
+              return false if ::File.lstat(file_path).symlink?
+
+              resolved = ::File.realpath(file_path)
+            rescue Errno::ENOENT, Errno::EACCES => e
+              log.debug("path resolution failed for #{file_path}: #{e.message}")
+              return false
+            end
+
+            resolved == allowed_root || resolved.start_with?(allowed_root + ::File::SEPARATOR)
+          end
+
           def build_runner_prompt(gap)
             <<~PROMPT
               Generate a Ruby module for the LegionIO framework that handles this capability:
@@ -147,6 +215,31 @@ module Legion
           def camelize(name)
             name.split('_').map(&:capitalize).join
           end
+
+          def stub_implementation_prompt(stub_content, context)
+            parts = ['Implement this LegionIO extension file.']
+            parts << "Extension: #{context[:name]}"
+            parts << "Category: #{context[:category]}"
+            parts << "Description: #{context[:description]}"
+            parts << "Metaphor: #{context[:metaphor]}" if context[:metaphor]
+            parts << ''
+            parts << 'Current stub:'
+            parts << stub_content
+            parts.join("\n")
+          end
+
+          def extract_code(content)
+            return nil if content.nil?
+
+            code = if content.match?(/```ruby\s*\r?\n/)
+                     content.match(/```ruby\s*\r?\n(.*?)```/m)&.captures&.first || content
+                   elsif content.match?(/```\s*\r?\n/)
+                     content.match(/```\s*\r?\n(.*?)```/m)&.captures&.first || content
+                   else
+                     content
+                   end
+            "#{code.strip}\n"
+          end
         end
       end
     end

data/lib/legion/extensions/codegen/version.rb

@@ -3,7 +3,7 @@
 module Legion
   module Extensions
     module Codegen
-      VERSION = '0.2.1'
+      VERSION = '0.2.4'
     end
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: lex-codegen
 version: !ruby/object:Gem::Version
-  version: 0.2.1
+  version: 0.2.4
 platform: ruby
 authors:
 - Esity